BergLabs.

Security & governance

Security and governance, built into the workflow.

BergLabs is independently certified to ISO/IEC 27001:2022 and ISO 9001:2015. Governance runs inside the work itself: access, audit logs, QA sampling, exception paths, reporting and rules.

See the certifications Talk to BergLabs
A governed actionAccess · Action · Review · Audit
  1. 01Data inScoped to the project
  2. 02Access checkRole-based
  3. 03Action scoredBergAuto
  4. 04Named reviewBelow the gate
  5. 05Audit logBergFlow
  6. 06ReportWeekly
Illustrative diagram. Every action passes an access check, carries a score, waits for a person when it should, and lands in the audit log.
  • Certified

    ISO/IEC 27001:2022 and ISO 9001:2015.

  • Governed

    Six controls inside every workflow.

  • Bounded

    Access, retention and PII agreed per engagement.

Certifications

Independently certified.

Audited by QRO Certification, an IAF-recognised certification body, and renewed through annual surveillance audits through 2029.

  • ISO/IEC 27001:2022Information Security Management System
  • ISO 9001:2015Quality Management System
  • 2ISO certifications held
  • 3Areas in scope: data annotation, AI model training, workflow automation
  • 2029Annual surveillance audits scheduled through
  • Certified

    ISO/IEC 27001:2022

    Information Security Management System

    Issued by
    QRO Certification (IAF-recognised)
    Issued to
    Berg Tech AI Private Limited
    Scope
    Data annotation, AI model training, workflow automation
    Renewal
    Annual surveillance audits through 2029
    Verify at qrocert.org
  • Certified

    ISO 9001:2015

    Quality Management System

    Issued by
    QRO Certification (IAF-recognised)
    Issued to
    Berg Tech AI Private Limited
    Scope
    Data annotation, AI model training, workflow automation
    Renewal
    Annual surveillance audits through 2029
    Verify at qrocert.org

Scope and renewal

The certificates, as a record.

Everything a security reviewer asks first, in one place.

Certification body
QRO Certification (IAF-recognised)
Information security
ISO/IEC 27001:2022 Information Security Management System
Quality
ISO 9001:2015 Quality Management System
Issued to
Berg Tech AI Private Limited
Scope
Data annotation, AI model training, workflow automation
Renewal
Annual surveillance audits through 2029
Verification
qrocert.org
Privacy
Aligned with GDPR and India’s DPDP Act

Governance promises

Six controls that ship with every workflow.

  1. 01

    Role-based access

    People see and act only on the projects, queues and actions their role allows. BergFlow is invite-only.

  2. 02

    Audit logs

    Every automated and human action is recorded in BergFlow with the time, the actor and the evidence.

  3. 03

    QA sampling

    Automated and human work are sampled against the agreed standard, batch by batch.

  4. 04

    Exception paths

    Every exception type has a named owner, a route and an SLA before the workflow goes live.

  5. 05

    Reporting

    SLA adherence, QA pass rate and exception rate are reported weekly against agreed targets.

  6. 06

    Rules framework

    Thresholds, policies and approval limits are versioned rules; changes record who made them and why.

Data boundaries

Your data stays inside the boundary you set.

Data boundaries are agreed in each engagement’s data protection terms before any data moves. Access is scoped to the project and the role, retention follows the contract, and personal data is handled on a need-to-process basis. BergLabs’ data handling is aligned with GDPR and India’s Digital Personal Data Protection Act, 2023.

  • Access: project-scoped, role-based and logged
  • Retention: set by contract; data returned or deleted at the end of the engagement as agreed
  • PII: minimised and masked where the workflow allows
  • Outbound: replies checked for PII and policy terms before they go out
  • Sample data: moved only through an agreed, access-controlled channel

Questions

Questions about security and governance

Credentials, scope, verification and data.

Credentials

Which certifications does BergLabs hold?

ISO/IEC 27001:2022 (Information Security Management System) and ISO 9001:2015 (Quality Management System), both issued by QRO Certification, an IAF-recognised body, to Berg Tech AI Private Limited.

What is in scope?

Data annotation, AI model training and workflow automation. The certificates are maintained through annual surveillance audits through 2029.

How can we verify the certificates?

At qrocert.org, using the certificate details BergLabs shares with your security team on request.

Data

How does BergLabs handle personal data?

BergLabs’ data handling is aligned with GDPR and India’s DPDP Act. Processing terms, retention and access are set out in each engagement’s data protection terms.

Who can see our data?

Only the people assigned to your project, through role-based access in BergFlow. Every action they take is logged.

Bring your security questionnaire.

We answer it against the certificates, the controls and the workflow you want to run.

Talk to BergLabs Read the documentation